基于物理内存获取的在线取证的可信性分析

《基于物理内存获取的在线取证的可信性分析》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、分类号：TP309单位代码：10431密级：学号：1043109212硕士学位论文基于物理内存获取的在线取证的可信性分析作者姓名苏贞专业计算机应用技术所在学院信息学院指导教师姓名王连海专业技术职务研究员2012年06月12日AThesisSubmittedfortheApplicationoftheMaster’sDegreeofEngineeringResearchontheCredibilityofLiveForensicsbasedonaccessingphysicalmemoryCandidate:SuZhenS

2、pecialty:ComputerApplicationTechnologySupervisor:ProfessorWangLianhaiShandongPolytechnicUniversity,Jinan,ChinaJune,2012山东轻工业学院硕士学位论文目录摘要.........................................................................................................................IABSTR

3、ACT...................................................................................................................I第1章绪论..............................................................................................................11.1研究背景.....................

4、......................................................................................11.2国内外相关研究评述.......................................................................................21.2.1国外研究现状.................................................................

5、.......................21.2.2国内研究现状........................................................................................4第2章在线取证概述............................................................................................................72.1在线取证的相关概念.........

6、..............................................................................72.2电子证据的来源及特点...................................................................................72.3现有的计算机取证模型..........................................................................

7、.........92.3.1多维计算机取证模型..........................................................................122.3.2数据挖掘算法被应用于计算机取证分析..........................................122.3.3基于人工免疫系统的计算机取证......................................................132.3.4利用蜜罐攻击技术取证.......

8、...............................................................132.3.5IDS与计算机取证技术结合.............................................................142.3.6利用Agent（